diff --git a/docs/platform-services/automation-service/app-central/integrations/google-chat.md b/docs/platform-services/automation-service/app-central/integrations/google-chat.md index 63720a84b5..d022ae7f3d 100644 --- a/docs/platform-services/automation-service/app-central/integrations/google-chat.md +++ b/docs/platform-services/automation-service/app-central/integrations/google-chat.md @@ -7,8 +7,8 @@ import useBaseUrl from '@docusaurus/useBaseUrl'; google -***Version: 2.1 -Updated: Dec 06, 2024*** +***Version: 2.2 +Updated: Sept 25, 2025*** Google Chat is an intelligent and secure communication and collaboration tool, built for teams. @@ -29,6 +29,44 @@ To send rich text messages, use the Create Message action with `Disable HTML` in ## Google Chat configuration +Our Google Chat integration support two types of authentication, Service Account and WIF (Workload Identity Federation). We recommend using WIF since it is more secure and easier to manage. For more information, see [Workload Identity Federation](https://cloud.google.com/iam/docs/workload-identity-federation). + +## Required AWS details from Sumo Logic + +To configure the Google Chat integration using WIF authentication, you need the following AWS details from Sumo Logic. These details are essential for setting up the Workload Identity Federation (WIF) credentials in Google Workspace: +* Sumo Logic AWS account ID: `246946804217` +* Sumo Logic AWS role: `stag-csoar-automation-gcpiam` +* Sumo Logic AWS Lambda function: `stag-csoar-automation-gcpiam` +* Full ARN: `arn:aws:sts::246946804217:assumed-role/stag-csoar-automation-gcpiam/stag-csoar-automation-gcpiam` + + +### Workload Identity Federation (WIF) authentication + +To [create WIF credentials](https://cloud.google.com/iam/docs/workload-identity-federation) in Google Workspace needed to configure the Google Chat app integration, follow these steps: +1. Log in to the [Google Cloud](https://console.cloud.google.com) portal. +2. Select a Google Cloud project (or create a new one). +3. Go to the **API&Services** +4. In the same page click on **ENABLED API AND SERVICES** and search for Google Chat and enable it. +5. Go to the **IAM & Admin** > **Service Accounts** page. +6. Click **CREATE SERVICE ACCOUNT** [Service Account](https://cloud.google.com/iam/docs/service-accounts-create) is required to access the Google Chat API. +7. While creating the service account, in **Permissions** add the role **Service Account Token Creator** and click on **DONE**.
google-chat +8. Go to the **IAM & Admin** > **Workload Identity Federation** page.
google-chat +9. Click **CREATE POOL**, provide the details, and click on **CONTINUE**.
google-chat +10. Add **Provider details**. Select **AWS** as the provider type and provide the details of the AWS Account ID which is provided by Sumo Logic. Click on **CONTINUE** and **SAVE**.
google-chat +11. Now you will see the created pool and provider.
google-chat +12. Now we have to build a principal name to configure in Sumo Logic. The format of the principal name is: `principalSet://iam.googleapis.com/projects/{YourProjectID}/locations/global/workloadIdentityPools/{YourPoolName}/attribute.aws_role/arn:aws:sts::{SumoAWSAccountID}:assumed-role/{SumoAWSRole}/{SumoAWSLambdaFunction}`. +13. Go to the **IAM & Admin** > **IAM** page and click on **Grant Access** to add a new principal. +14. In the **New principals** field, provide the above principal name and select the role **Workload Identity User**. Click on **SAVE**.
google-chat +15. Go to the **IAM & Admin** > **Workload Identity Federation** page and select the pool which was created above. +16. Click on **Grant Access** > **Grant access using service account impersonation**. +17. Select the service account which created above, select the principle as aws_role and provide the arn `arn:aws:sts::{SumoAWSAccountID}:assumed-role/{SumoAWSRole}` and click on **SAVE**.
google-chat +18. Again go to **Grant Access** > **Grant access using service account impersonation**. Select the service account which was created above. Select the principle as `aws_role` and provide the arn `arn:aws:sts::{SumoAWSAccountID}:assumed-role/{SumoAWSRole}/{SumoAWSLambdaFunction}`. Click on **SAVE**. +19. Download the WIF `conf.json` file. Make sure you save it in a safe place. Use the JSON content to configure the Google Chat integration to use WIF authentication in Automation Service and Cloud SOAR. +20. To configure the app in Google Chat API, go to **APIs & Services**, select **Google Chat API**, and in **CONFIGURATION** provide the details and click on **SAVE**.
google-drive +21. Go to the **Google Chat App** and add the above app in that. Also, to add above app in space, go to **space** and in **Apps & integration** add the app. + + +### Service Account authentication To [create service account credentials](https://developers.google.com/workspace/guides/create-credentials) in Google Workspace needed to configure the Google Chat app integration, follow these steps: 1. Log in to the [Google Cloud](https://console.cloud.google.com) portal. @@ -83,4 +121,5 @@ Use Google Chat to receive notifications, ensuring you promptly get important up * August 27, 2024 (v2.0) - First upload * October 29, 2024 (v2.0) - Updated the docs -* December 06, 2024 (v2.1) - Added the Rich Text Message support in the Create Message action \ No newline at end of file +* December 06, 2024 (v2.1) - Added the Rich Text Message support in the Create Message action +* September 25, 2025 (v2.2) - Updated the WIF configuration steps \ No newline at end of file diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-10.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-10.png new file mode 100644 index 0000000000..70c35b4127 Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-10.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-11.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-11.png new file mode 100644 index 0000000000..7e301520e9 Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-11.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-12.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-12.png new file mode 100644 index 0000000000..1f58ed4dbc Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-12.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-4.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-4.png new file mode 100644 index 0000000000..22117309fe Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-4.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-5.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-5.png new file mode 100644 index 0000000000..e25ae4e7a7 Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-5.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-6.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-6.png new file mode 100644 index 0000000000..47a41eef51 Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-6.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-7.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-7.png new file mode 100644 index 0000000000..903071b38c Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-7.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-8.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-8.png new file mode 100644 index 0000000000..1a94a3a796 Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-8.png differ diff --git a/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-9.png b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-9.png new file mode 100644 index 0000000000..cda8f4cdba Binary files /dev/null and b/static/img/platform-services/automation-service/app-central/integrations/google-chat/google-chat-9.png differ